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Why are we interested in HIT TP? 
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Why are we interested in HI TP? 


* Almost all web-browsing uses HTTP: 
= Internet surfing 
SMA VLcloyaat-btm@ 4-l (eleva lelnsetcbllA@aeot-bblacinem, 
= OSN (Facebook/MySpace/etc:) 
= Internet Searching (Google/Bing/etc.) 
= Online Mapping (Google Maps/Mapquest/etc.) 
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XKS HTTP Activity Search 


Another common query is analysts who 
want to see all traffic from a given IP 
address (or IP: addresses) to a specific 
website. 
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XKS HTTP Activity Search 


* For example let’s say we want to see 
all traffic from IP Address 1.2.3.4 to 


the website www.website.com 
* While we can just put the IP address 


and the “host” into the search form, 
remember what we saw before about 
the various host names for a given 


website 








